manualshive.com logo in svg

D-Link DWL-3500AP, Руководство по настройке

Поделиться
Скачать
D-Link DWL-3500AP Скачать руководство пользователя страница 52

device and can cause the Wireless switch to lose communications with the “remote” AP 
causing the wireless demo network to go down.  This issue will resolve itself after the 
Wireless switch declares AP1 failed.  In a real-world environment most likely the AP will 
not fail, and a roam will occur because of client movement.  If an AP does fail and the 
routes are configured in the manner described above, a short interruption of service could 
be observed.  (Please see section 4.6.1 for a description of how to demonstrate a roam 
without the chance of a routing loop). 

 

4.2.3  Set the MTU Size 

Configure the interface MTU size appropriate throughout the network to support the 
larger frames potentially involved in L3 Tunneling. 
 

4.3  Configure WLAN Settings  

Configure the WLAN parameters to support the 3 Tunneled SSID Networks on both 
WS1 and WS2.  Configure the “Guest” SSID to use no security, “D-LINK-NET1” to use 
WPA2 (see below), and “D-LINK-NET2” to use Static-WEP.  Provide the L3 Tunnel 
Subnet addresses in the configuration. 

4.3.1 WPA2 

Configuration 

To support WPA2, enable “wpa-enterprise” security mode, configure the WPA Ciphers 
to use TKIP and CCMP, and include WPA version WPA2.  Furthermore, configure the 
IP address and configured secret for the Radius server in the AP Profile (192.168.4.1).  
You will also need to appropriately configure your client to support WPA2 which might 
require a client OS update. 

4.3.2 Configure 

Discovery 

Configure WLAN Discovery parameters on WS1 and WS2.  Use IP/L3 Discovery on 
WS1 and/or WS2 to discover the other peer switch across subnets (in other words, add 
the loopback address of WS2 into the IP discovery list for WS1).  Use L2/VLAN 
Discovery on WS1 and WS2 to discover the APs on VLANs 101 and 102 respectively (in 
other words, add VLAN 101 to the L2 discovery list on WS1 and VLAN 102 to the 
discovery list on WS2). 

4.3.3 Connections 

Connect devices and verify that APs move to managed state.  You will need to add the 
APs MAC addresses into your local AP database. 
 

4.4  Configure the RADIUS Server 

Since WPA Enterprise (WPA2) uses a RADIUS server to authenticate clients, you must 
configure a client entry for the AP, which makes requests to the RADIUS server on 

Содержание DWL-3500AP

Страница 1: ...Unified Wired Wireless Access System ProductModel DWS 3000 Series DWL 3500AP 8500AP Version2 1 Configuration Guide...

Страница 2: ...uring LAN Settings 20 2 1 1 Create VLANs 20 2 1 2 Configure VLAN Routing 23 2 1 3 Enable Global Routing 25 2 1 4 Configure Static Routing 25 2 1 5 Configure the Loopback Interface 25 2 1 6 DHCP Server...

Страница 3: ...DHCP 51 4 2 2 Configure routes on WS1 WS2 and L3 device 51 4 2 3 Set the MTU Size 52 4 3 Configure WLAN Settings 52 4 3 1 WPA2 Configuration 52 4 3 2 Configure Discovery 52 4 3 3 Connections 52 4 4 C...

Страница 4: ...ireless switch for wireless client address assignment Understand some of the D LINK Unified Access Point features WS1 AP1 AP2 Seamless Roaming 10 90 90 90 8 CL1 10 90 90 91 8 10 90 90 92 8 SSID Guest...

Страница 5: ...ew static IP address so that it does not use the same IP address as AP1 To access and configure AP1 and AP2 by using the access point CLI use the following steps Note you will only have CLI access to...

Страница 6: ...access of all clients that have addresses within this range and still maintain additional addresses in this space for static configuration for clients or servers Since these addresses are on the 10 0...

Страница 7: ...ireless clients 1 Select Pool Configuration in the Navigation tree 2 Select create and specify the following settings a Pool Name GuestPool b Type of Binding Dynamic c Network Number 10 0 0 0 d Networ...

Страница 8: ...refreshes with additional fields Click the Configure button associated with the appropriate fields and enter the following criteria to deny HTTP traffic from clients on the Guest Network to the Switc...

Страница 9: ...e applied to the appropriate wireless client traffic that goes through the APs connected to the switch 1 From the ACL Interface Configuration page 2 Select port 0 1 from the Slot Port drop down menu 3...

Страница 10: ...and APs and peer switches It is important to set the correct country code on the switch so that the APs operate in the correct regulatory domain 1 To configure wireless features select the WLAN tab f...

Страница 11: ...to port 13 of the switch 3 Wait about 60 seconds and click Monitoring Access Points Authentication Failed Access Points 4 Select the APs to be managed and click Manage to add them to the valid AP dat...

Страница 12: ...1 6 Save Configuration To save the switch configuration select Save Changes from the tool bar...

Страница 13: ...will also observe minimal packet loss during a roam 1 8 2 Auto channel adjustment after associating with AP2 To check the current operating channel and to see if any channel adjustment is required se...

Страница 14: ...P Management RF Management 2 Choose the 802 11 b g and select the Manual Channel Plan tab and then the Start button to start the process Use the Refresh button to check the results of the channel plan...

Страница 15: ...ent Advanced page Select the appropriate channel of the AP radio and change it to the desired channel on the next screen 1 8 3 Rogue AP Detection To check the rogue AP list select the WLAN tab from th...

Страница 16: ...ed to a level based on presence or absence of packet transmission errors The power is changed in increments of 10 Automatic adjustment can be done by selecting the Automatic Power in the Radio tab of...

Страница 17: ...be applied to the AP To do this click Administration Advanced Configuration AP Profiles Select the profile to apply then click Apply to update all APs that use the selected profile 1 8 4 1 Self Healin...

Страница 18: ...in the Radio Details tab of Monitoring Access Points Managed Access Points 1 9 Switch and AP Cleanup You will not need any of the settings you configured in this scenario for the other three scenario...

Страница 19: ...o block IP traffic between clients on different SSIDs Assign IP addresses of APs wireless clients through the WS DHCP server Configure multiple SSIDs with different VLANs Enable wireless encryption WS...

Страница 20: ...VLAN routing interfaces for the two VAPs The third VAP is the Guest Network which is not used in this scenario When wireless clients connect to the AP all traffic from the client is tagged with the V...

Страница 21: ...uration tells the switch to add an 802 1Q VLAN Tag to the packets that egress the port on those VLANs This is so that the AP knows which Network or SSID to forward the traffic on 7 Click Submit 8 Repe...

Страница 22: ...r you have repeated the steps to configure all four VLANs use the Monitoring VLAN Summary VLAN Status and VLAN Port Status pages to verify that the VLANs and the ports are configured properly VLAN Sta...

Страница 23: ...lick L3 Features VLAN Routing Configuration 2 Enter the VLAN ID for VLAN 20 in the VLAN ID field and select Create to create a VLAN routing interface for VLAN 20 This creates a logical routing interfa...

Страница 24: ...interface 4 2 VLAN 30 4 3 VLAN 100 and 4 4 VLAN 200 Refer to the following table for IP address information Interface IP Address Subnet Mask Interface 4 1 192 168 20 254 255 255 255 0 Interface 4 2 1...

Страница 25: ...eed to configure any static routes for this scenario 2 1 5 Configure the Loopback Interface When routing is enabled you should create a Loopback interface for the wireless functions The loopback inter...

Страница 26: ...From the LAN menu click Administration DHCP Server Global Configuration 2 In the Admin Mode field select Enable then click Submit to enable the DHCP server 3 Select Pool Configuration in the Navigatio...

Страница 27: ...eld then click Submit 10 From the Rule Configuration page enter 1 as the Rule ID Deny as the Action and click Submit 11 The screen refreshes with additional fields Click the Configure button associate...

Страница 28: ...utton associated with the appropriate fields and enter the following criteria to deny IP traffic from clients on the D LINK NET2 network to clients on the D LINK NET1 network Protocol Keyword IP Sourc...

Страница 29: ...ion field and True in the Match Every field and then click Submit Next you must attach the ACL to port 0 1 and port 0 13 so that the rules are applied to the appropriate wireless client traffic that g...

Страница 30: ...b of the Administration Basic Setup page make sure the switch IP address is the Loopback interface address 192 168 10 254 the country code is correct and that the WLAN Switch Operational Status is Ena...

Страница 31: ...ect the 802 11b g radio 6 Select the check box next to Managed SSID 2 and click Edit 7 Change the following Network parameters and select Submit a SSID D LINK NET1 b VLAN 100 c Security WEP Select PSK...

Страница 32: ...repeat the procedure and add a second secure network return to the SSID page by clicking on the SSID tab 9 Select the check box next to Managed SSID 3 and click Edit 10 Change the following parameters...

Страница 33: ...onnect AP2 to port 13 of the switch 3 Wait about 60 seconds and click Monitoring Access Points Managed Access Points Note you might find the APs in the Authentication Failed Access Points page if you...

Страница 34: ...your IP address does not change even though you have now associated with an AP on a different subnet Fast roams will not function on the Guest Network SSID because the client will be forced to acquire...

Страница 35: ...for this scenario include the following To know how to setup the L3 tunneling L3 Tunneling must be used since the APs are on different IP subnets and there is not a L2 path between the APs for the WLA...

Страница 36: ...rfaces or devices you configure along with their IP address and port information You configure the entries in bold in this scenario All other entries were configured in previous scenarios Interface De...

Страница 37: ...t Configure the Port VLAN ID for ports 0 21 0 22 and 0 24 8 From the LAN tab on the switch Web interface click L2 Features VLAN Port Configuration 9 Select port 0 21 from the Slot Port drop down menu...

Страница 38: ...ulated customer network You can either configure static routes for each network you need access to at the Wireless Switch or you can configure a default route The wireless switch at a minimum requires...

Страница 39: ...clients on AP1 and AP2 if they associate with a non Tunneled SSID 3 1 4 DHCP Server You need to configure a new IP address pool for the clients that connect to the L3 Tunnel network the FTP Audio Vide...

Страница 40: ...ch ports The AP can transmit and receive frames of up to 1542 bytes on the LAN port If you use tunneling only for IP telephony or if you set the MTU size on all wireless clients that use tunneling to...

Страница 41: ...very tab on the Basic Setup page 3 Add the IP address for AP2 172 17 6 1 which is on the customer network to the L3 IP Discovery list and then click Submit Note since you do not know for sure which IP...

Страница 42: ...PA2 h WPA Ciphers TKIP CCMP i Passphrase 1234567890 3 2 2 Apply the AP Profile Because the AP profile that the APs use has changed and you have not disconnected AP1 you can manually re apply the AP pr...

Страница 43: ...the FTP Audio Video devices 7 Connect AP2 to a port in the 172 168 6 0 network on the customer L3 device 8 Wait about 60 seconds and click Monitoring Access Points Managed Access Points to make sure...

Страница 44: ...rk and check if you re getting the IP address correctly from the Wireless switch s DHCP server on the Tunnel subnet 2 Once wireless connectivity is confirmed you can check which AP your laptop connect...

Страница 45: ...se Full 4 WS Managed AP AP Neighbor List Full 5 WS Managed AP Client Neighbor List Full 6 WS AP Failure List Full 7 RF Scan AP List Full 8 Client Association Database Full 9 Client Failure List Full P...

Страница 46: ...ed The trap logs can be viewed by traversing to DWS 3024 Monitoring Trap Logs in the LAN tab 3 8 Syslog Configuration Enable Syslog by traversing to DWS 3026 Administration System Log Configuration an...

Страница 47: ...n required for engineering debugging Connect your laptop PC to WLAN Switch s serial console or telnet to the IP address of the switch and capture the following information 1 show running config 2 show...

Страница 48: ......

Страница 49: ...ives To know how to setup the multiple WS deployment as peer switches across a L3 core To know how to setup WPA2 EAP Authentication AP1 WS1 Network IP 10 90 90 90 Loopback 192 168 10 250 L3 Tunnels 19...

Страница 50: ...rface to WS1 NA 172 17 5 254 24 L3 device port WS2 Management Interface NA 10 90 90 91 24 Any unused WS2 Loopback Interface NA 192 168 20 250 32 Logical only WS2 L3 Tunnel Interface 2 RD 192 168 2 253...

Страница 51: ...0 0 172 17 6 254 L3 Device 192 168 101 0 255 255 255 0 172 17 5 253 L3 Device 192 168 102 0 255 255 255 0 172 17 6 253 L3 Device 192 168 4 0 255 255 255 0 172 17 6 253 L3 Device 192 168 10 0 255 255...

Страница 52: ...in the configuration 4 3 1 WPA2 Configuration To support WPA2 enable wpa enterprise security mode configure the WPA Ciphers to use TKIP and CCMP and include WPA version WPA2 Furthermore configure the...

Страница 53: ...ent entry for AP2 2 Add the user dlink with password admin to the users file as dlink Auth Type EAP User Password admin 3 Restart the RADIUS server you must restart it after you make any changes to th...

Страница 54: ...e a roam by disabling the radio the client is currently associated with By using this method the link between the AP and the Wireless switch will not go down and therefore the local route will not be...

Страница 55: ...hes D Link Access Points other access points and associated wireless clients The WLAN Visualization tool can help you visualize where the APs are in relationship to the building You can upload one or...

Страница 56: ...d your own floor plan image file to Wireless Switch it s recommended the file size is smaller than 150KB 3 The RF power display in this tool is only for reference and it doesn t intend to reflect the...

Страница 57: ...Then go to Edit and select New Graph and you can input the following then press Save...

Страница 58: ...side tab including Switches Managed APs and Rogue APs Then you can go to View AP Power Display and select Show 802 11b g you ll be able to see the following Then you can move your cursor to any of th...

Страница 59: ...2nd level of system access the command prompt is ex DWS 3024 and you can view all system information with the command Following are some useful ones for listed scenarios show network show vlan port a...

Страница 60: ...WS 3024 SCN1 1018 DWS 3024 SCN2 1018 DWS 3024 SCN3 1018 DWS 3024 1 SCN4 1018 DWS 3024 2 SCN4 1018 respectively two configurations for scenario 4 for 2 WS so you can still go on the tests Downloading t...

Страница 61: ......

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды